Automai

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Automai records in CISA KEV

No Automai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Director · all components

TI-2025-28924 CVE-2025-46066 · GHSA-rv23-6fx7-9r87

MEDIUM 43

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00348 Published 2026-01-12 No fix listed CWE-280

TI-2025-28926 CVE-2025-46068 · GHSA-7g4v-c9v7-6647

MEDIUM 41

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00549 Published 2026-01-12 No fix listed CWE-434

TI-2025-28925 CVE-2025-46067 · GHSA-4rm3-56gv-9xv3

MEDIUM 41

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js file

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00302 Published 2026-01-12 No fix listed CWE-259